Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/HtqudHKGZrs-q9RZ7xd5KY6PHG4.roa
File: HtqudHKGZrs-q9RZ7xd5KY6PHG4.roa (raw, json)
Hash identifier: SPZ/R2ylIWqjJcy/cSAbLKHszsrJ/99WEGPo5f1lQyM=
Subject key identifier: 1E:DA:AE:74:72:86:66:BB:3E:AB:D4:59:EF:17:79:29:8E:8F:1C:6E
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019E8895ECC82399A840B0A7190839B03567
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/HtqudHKGZrs-q9RZ7xd5KY6PHG4.roa
Signing time: Tue 02 Jun 2026 13:46:27 +0000
ROA not before: Tue 02 Jun 2026 13:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.155.65.0/24 maxlen: 24
146.19.21.0/24 maxlen: 24
193.200.78.0/24 maxlen: 24
194.26.215.0/24 maxlen: 24
2a06:5fc0::/29 maxlen: 29
2a0b:ac00::/29 maxlen: 29
2a0f:9b40::/29 maxlen: 29
2a13:b9c0::/29 maxlen: 29
2a13:bb40::/29 maxlen: 29
2a13:c240::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
2a13:c440::/29 maxlen: 29
2a13:e040::/29 maxlen: 29
2a14:1100::/32 maxlen: 32
2a14:1103::/32 maxlen: 32
2a14:42c0::/29 maxlen: 29
2a14:6a40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:95:ec:c8:23:99:a8:40:b0:a7:19:08:39:b0:35:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 2 13:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1edaae74728666bb3eabd459ef1779298e8f1c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:a0:eb:87:03:18:b9:67:e1:c1:0f:13:ec:
f7:5d:0b:d6:21:ee:4b:aa:f3:2b:bc:40:04:42:ad:
1e:37:eb:f8:cd:6d:a9:22:a4:d2:8c:0d:18:9e:71:
b8:dc:41:88:1f:7a:b2:b4:12:c3:b5:ec:14:7c:48:
69:18:9c:4e:6c:79:08:88:0c:25:54:12:09:a3:ce:
18:11:25:61:88:c2:e5:aa:59:18:ad:7f:27:44:8c:
7e:f5:1f:37:78:f7:e7:f1:8b:b0:d1:9c:e1:4e:c9:
07:f4:3c:db:41:91:8e:2f:3b:c7:4e:9d:8d:e4:b8:
d2:a0:f5:8a:bd:ce:e7:94:65:91:9a:20:43:60:60:
f4:96:25:a4:30:4c:55:c5:59:d0:f8:6a:28:ba:82:
d6:ff:98:0e:9a:10:72:40:26:c1:81:27:88:e7:85:
fb:68:1f:31:95:30:e8:ca:6e:46:5b:a0:66:b5:18:
e9:f8:3a:1b:aa:c2:93:dc:57:0c:c3:1a:42:8f:b4:
17:b2:1e:b4:35:fa:db:73:b1:e9:c1:06:f8:cd:45:
4e:0b:b3:2a:29:b0:6f:36:4a:ef:47:30:75:4e:32:
37:e2:ae:f5:87:aa:66:9f:fe:89:0e:21:a6:65:56:
fc:b7:ac:81:34:f8:07:5e:c6:84:4f:f5:38:67:30:
79:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DA:AE:74:72:86:66:BB:3E:AB:D4:59:EF:17:79:29:8E:8F:1C:6E
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/HtqudHKGZrs-q9RZ7xd5KY6PHG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.65.0/24
146.19.21.0/24
193.200.78.0/24
194.26.215.0/24
IPv6:
2a06:5fc0::/29
2a0b:ac00::/29
2a0f:9b40::/29
2a13:b9c0::/29
2a13:bb40::/29
2a13:c240::/29
2a13:c340::/29
2a13:c440::/29
2a13:e040::/29
2a14:1100::/32
2a14:1103::/32
2a14:42c0::/29
2a14:6a40::/29
Signature Algorithm: sha256WithRSAEncryption
40:73:4e:64:18:8f:a7:e2:2a:79:20:40:f1:f0:c2:d9:49:3a:
61:38:35:fb:52:ad:fa:17:82:3b:78:54:e7:b0:ab:4a:64:9f:
09:60:e9:23:7d:5a:4f:19:db:1a:10:42:7d:e1:3b:ee:b7:7b:
6a:0e:48:4f:92:30:e1:ec:d1:a7:75:78:29:6c:35:8f:e1:ff:
b7:63:04:81:05:1f:0c:15:e5:b0:bd:a9:d9:44:a9:55:ee:f2:
b8:ce:83:ca:a0:2f:de:b5:c7:9a:4a:32:2e:01:1d:02:05:81:
78:55:bd:55:4d:15:42:eb:8c:72:9c:07:b4:92:34:43:2b:4b:
29:9e:34:bc:7e:4b:7e:5b:99:57:9a:88:89:4a:c1:97:5a:65:
e4:c7:48:37:bc:b2:62:45:33:0c:a9:a3:03:87:9d:f9:e8:52:
e9:4f:ce:ba:e4:ac:0f:b4:99:80:43:6d:87:0e:1a:50:fb:8b:
db:0d:0a:f5:dc:d4:3a:44:c5:02:8c:96:da:af:fb:7d:2a:67:
2d:42:93:33:ba:4e:f5:51:9e:64:3b:47:bf:12:25:97:01:3b:
a8:b6:8e:81:7a:6e:c0:f1:ec:55:eb:66:46:b7:39:3c:c6:dc:
bf:3a:9a:39:1b:d9:99:b9:10:38:93:46:5f:53:b9:7a:30:e6:
4e:04:31:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 19:05:20 2026 by rpki-client